Intrusion detection method based on improved self-organization mapping

Chaoyi MA,Jian XU,Hong ZHANG
DOI: https://doi.org/10.16652/j.issn.1004-373x.2015.23.022
2015-01-01
Abstract:Intrusion detection is one of the main measures to ensure the Internet safety,and has important significance to recognize and diagnose the network intrusion. In this paper,the thought of self?organization mapping(SOM)is introduced into the network intrusion detection,and a network intrusion detection algorithm based on SOM is proposed. The neighborhood densi?ty of output neurone in SOM neural network is ranked. The method of setting the neighborhood density threshold in combination with receiver operating characteristic(ROC)curve makes the intrusion detection results express by neighborhood density of the output neurone. The disadvantage that the clustering results of output neurone itself are hard to understand has been overcome, which is caused by the distortion generating in SOM neural network training. The simulation experiments of the algorithm show that the algorithm is effective,and has appreciable detection rate.
What problem does this paper attempt to address?